Cybersecurity Engineer - Application Security

• Implement and Manage Security Tools

  : Install, configure, and administer DevSecOps technologies including SAST, DAST, IAST, SCA, Threat Modeling platforms, and secrets management solutions.

• Secure Development Enablement

  : Collaborate with development teams to integrate security controls into CI/CD pipelines and ensure security automation at scale.

• Application Security Engineering

  : Develop and maintain secure code in modern languages (e.g., Python, Ruby, Go, JavaScript) and frameworks (e.g., React, React Native, Node.js, Angular, Rails, Django).

• Security Metrics & Observability

  : Collect and analyze metrics from DevSecOps tools, implement application security log ingestion, and build dashboards for vulnerability trends and compliance reporting.

• Threat Modeling & Risk Assessment

  : Conduct threat modeling exercises for new and existing applications, identify security gaps, and recommend mitigations.

• Secure Coding Advocacy

  : Promote and train developers globally on secure coding practices, OWASP Top 10, and emerging security threats.

• Vulnerability Management

  : Triage, prioritize, and track remediation of application vulnerabilities across multiple teams and environments.

• Continuous Improvement

  : Research and evaluate new security tools, frameworks, and best practices to enhance the organizations security posture.

• Collaboration & Communication

  : Work closely with DevOps, Cloud, and Product Engineering teams to ensure security is embedded throughout the software development lifecycle.

Qualifications and Education:

• Education & Experience Bachelors degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).
• Total 6+ years of IT experience in cybersecurity, application security area

  .

• 3+ years of experience in application security, DevSecOps, or software development with a security focus.
• Preferred Certifications Relevant certifications such as CSSLP, GWAPT, GWEB, OSWE, Security+, or CISSP are a plus.

Required Knowledge and Skills

• Technical Skills

• Hands-on experience with DevSecOps tools and practices (SAST, DAST, IAST, SCA, Threat Modeling, secrets management).
• Proficiency in modern programming languages (Python, Ruby, Go, JavaScript) and frameworks (React, Node.js, Angular, Rails, Django).
• Strong understanding of CI/CD pipelines and integrating security controls into build and deployment processes.
• Familiarity with container security (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP).
• Knowledge of secure coding principles, OWASP Top 10, and common application vulnerabilities.

• Security Expertise

• Experience conducting threat modeling and risk assessments for applications.
• Ability to analyze vulnerability reports and guide remediation efforts.
• Understanding of compliance frameworks (e.g., PCI-DSS, SOC 2, ISO 27001) and secure SDLC practices.

• Soft Skills

• Excellent communication and collaboration skills to work with global development teams.
• Strong problem-solving and analytical mindset. Ability to evangelize security best practices and influence engineering culture.

DISCLAIMER
This job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.
V.01 24/10/14